proomt

Search

Search posts, papers, and topics

All posts

InfoQCraig Risi3 min readrelease notesintermediate

WSO2 Releases Agent Manager as Enterprises Look to Control Growing AI Agent Sprawl

Read on infoq.com

Summary

WSO2 Agent Manager GA adds model‑agnostic identity, role‑based access, policy enforcement (40+ controls), a Kubernetes‑native sandboxed runtime, and OpenTelemetry‑based tracing/evaluation for AI agents across cloud, on‑prem and hybrid environments.

  • Central inventory with verifiable agent identity, token exchange, delegation, and revocation.
  • Role‑based access and 40+ built‑in policies (PII masking, rate limiting) apply to agent, MCP, and LLM layers.
  • Kubernetes‑native sandbox isolates agent execution while exposing metrics via OpenTelemetry.
  • Rule‑based and LLM‑based evaluation monitors token consumption, behavior drift, and response quality.

Enterprises deploying heterogeneous AI agents need a single control plane for identity, security, policy, and observability that isn’t tied to any specific model or vendor. WSO2’s platform attempts to fill that gap, offering a reusable governance layer as agent estates scale.

5/10
llmobservabilitysecurityml infrakubernetespolicy

Related reading

  1. Agent Substrate brings high-density, scalable, trusted infrastructure to GKE

    Agent Substrate is an open‑source runtime for AI agents that runs on GKE. It uses Cloud Hypervisor microVMs or gVisor sandboxes to give kernel‑level isolation, a custom control‑ and data‑plane that can suspend/resume agents in <500 ms, and a “zero‑idle” model that packs >1 000 dormant agents per host (≈10× density vs. containers). GKE integration adds custom ComputeClasses, spot/on‑demand pools,…

    Google Cloud Bloggoogle.com6 min

  4. Introducing the DevOps Agent Kit

    The DevOps Agent Kit is an Apache‑2.0 open‑source starter kit that lets you plug an LLM‑based coding assistant into your existing CI/CD, security, and feature‑flag tooling via CloudBees Unify. It ships with seven read‑only example skills, enforces RBAC and audit trails, and normalises data from up to 63 tools so the agent can answer a single “are we good to ship?” question with verifiable evidenc…

    Codeshipcloudbees.com5 min

  5. Introducing Filestore agent volumes: fully managed storage for agent workspaces

    Google Cloud adds Filestore agent volumes, a fully‑managed, elastic file‑system that automatically provisions isolated POSIX workspaces for GKE‑based AI agent sandboxes. Volumes attach in milliseconds, support RWX with file‑level locking, and charge only for used capacity with automatic tiering, aiming to cut cold‑start latency and storage waste for large‑scale agent fleets.

    Google Cloud Bloggoogle.com4 min